A week in security (June 11 – June 17)

Last week on Malwarebytes Labs, we discussed how to protect the online privacy of children, we gave you a spring 2018 overview of exploit kits, rounded up the ongoing discussions about the VPNFilter malware, and discussed the struggles of UK law enforcement with modern-day cybercrime. Other news...

Unprotected Server Exposes Weight Watchers Internal IT Infrastructure

A critical server for popular weight-loss service Weight Watchers was left unprotected, allowing researchers to take a bite out of dozens of exposed S3 buckets containing company data and AWS access keys. Researchers at Kromtech Security said that they discovered a Weight Watchers Kubernetes...

weightwatchers.be Open Redirect vulnerability

Vulnerable URL: http://www.weightwatchers.be/plan/flex/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclos...

Weight Watchers Mobile - Customized SSL, Dangerous filesystem permissions, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Weight Watchers Mobile published at the 'play' market has multiple vulnerabilities...

aka.weightwatchers.com.au XSS vulnerability

Vulnerable URL: http://aka.weightwatchers.com.au/plan/flex/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

Weight Watchers Magazin (DE) - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Weight Watchers Magazin DE published at the 'play' market has multiple vulnerabilities...

Weight Watchers Österreich - External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Weight Watchers Österreich published at the 'play' market has multiple vulnerabilities...

Weight Watchers Lose Weight - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Weight Watchers Lose Weight published at the 'play' market has multiple vulnerabilities...